Is anybody forwarding osquery logs (json) to any open source threat intelligence platform like YETI or MISP? If yes, how do you approach it? How do you perform threat hunting with OSQuery (Windows mostly)

You will likely want to place a SIEM in the middle that pulls/pushes to a TIP like YETI or MISP.

Thanks for the info. Do you have any good resource to read up on top of your head regarding same?

airbnb sends osquery logs to streamalert via kinesis, matches ioc from anomali

Interesting. Thanks @jamie